See below the fixed bugs in the CA Gateway version running on Cryptographic Security Platform 1.3.0.

Unexpected warning logs (ATEAM-18776)

CA Gateway records unexpected warning logs triggered by the Spring framework. For example:

Check the corresponding BeanPostProcessor declaration and its dependencies/advisors. If this bean does not have to be post-processed, declare it with ROLE_INFRASTRUCTURE.

URL not hardcoded on Sectigo configuration (ATEAM-18856)

When integrating a Sectigo CA, the configuration settings require entering a URL setting. However, this URL value should be hardcoded, as is always the following.

https://cert-manager.com

Error when renewing a Sectigo-issued SSL certificate (ATEAM-18858) 

CA Gateway returns an error when trying to renew an SSL certificate using a Sectigo CA.

Sectigo plugin requires profile synchronization enabled by default (ATEAM-18863) 

The enable-ca-profile-sync setting defaults to false for all profiles. However, the Sectigo configuration requires this setting to default to true.

Failed deployments reported as successful (ATEAM-18893)

When a CA Gateway deployment fails, the management console incorrectly displays the deployment as successful, even though the process has failed.

Digicert CA with Certificate Enrollment Gateway not supported  (ATEAM-18920)

Certificate issuance fails in the following situation:

  • The Certificate Authority is Digicert CA 
  • The client application is Certificate Enrollment Gateway
  • The enrollment protocol is ACME

Documentation does not describe the risks of enabling SAN attributes on request (ATEAM-19009)

The CA Gateway documentation does not clearly explain the risks associated with allowing Subject Alternative Name (SAN) attributes in enrollment requests.

Bug resolution: A new section in Enabling SAN attributes in the enrollment request describes the risks.

Error when enrolling certificates with a DigiCert CA (ATEAM-19060) 

CA Gateway returns a "cagw-5000" error when using a DigiCert CA.